Snowflake-Labs / sansshell
A non-interactive daemon for host management
☆104Updated last week
Alternatives and similar repositories for sansshell:
Users that are interested in sansshell are comparing it to the libraries listed below
- Provides agent and server plugins for SPIRE to allow TPM 2-based node attestation.☆77Updated last year
- vexctl is a tool to attest VEX impact statements☆44Updated last year
- ☆74Updated 3 months ago
- an experimental suite of applications and APIs for monitoring kernel-level activity on a live Kubernetes cluster☆69Updated 3 years ago
- This tool allows using a SPIFFE JWT to authenticate to AWS APIs☆34Updated 9 months ago
- Integrates Spiffe and Vault to have secretless authentication☆87Updated last week
- A highly configurable build executor and observer designed to generate signed SLSA provenance attestations about build runs.☆60Updated this week
- A specification for signing methods and formats used by Secure Systems Lab projects.☆72Updated 6 months ago
- ☆91Updated last week
- ☆56Updated 2 years ago
- Tooling and library for generation, validation and verification of supply chain metadata documents and frameworks☆31Updated last year
- 🎟 Voucher creates attestations for Binary Authorization☆73Updated last week
- Add CA certificates into containers☆144Updated 3 weeks ago
- ☆53Updated this week
- Terraform module to configure Vault for GitHub OIDC authentication from Action runners.☆28Updated 6 months ago
- sigstore the hard way!☆110Updated 10 months ago
- Curated list of SPIFFE and SPIRE resources☆55Updated 2 years ago
- ☆96Updated 5 months ago
- a tool to audit the istio service mesh☆173Updated 3 years ago
- sigstore installation walkthrough, local☆57Updated 10 months ago
- Archivista is a graph and storage service for in-toto attestations. Archivista enables the discovery and retrieval of attestations for so…☆80Updated this week
- vault-auth-spire is an authentication plugin for Hashicorp Vault which allows logging into Vault using a Spire provided SVID.☆41Updated last year
- 🔍 Rekor transparency log monitoring and alerting☆27Updated last year
- Go implementation of witness☆33Updated this week
- Container image registry that serves images built fresh when you ask for them☆220Updated last month
- Stuff to make standing up sigstore (esp. for testing) easier for e2e/integration testing.☆63Updated last week
- Add digests to container and init container images in Kubernetes pod and pod template specs. Use either as a mutating admission webhook, …☆133Updated last week
- oci and apk explorer☆53Updated last week
- Linux Process Discovery. C Library, Go bindings, Runtime.☆219Updated 2 years ago
- [Experimental] jail for Go modules☆75Updated this week